This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft File: cub9InHd4QiG2X_xRwPlgaIEtl4.mft (raw, json) Hash identifier: iqGDkR6ltfjjZ7ysMo/db+awnNIjBQe0LW81eqrZEAM= Subject key identifier: A0:16:D0:58:D2:C9:22:42:EB:79:9D:51:FB:1C:86:12:66:0D:0C:14 Authority key identifier: 72:E6:FD:22:71:DD:E1:08:86:D9:7F:F1:47:03:E5:81:A2:04:B6:5E Certificate issuer: /CN=72e6fd2271dde10886d97ff14703e581a204b65e Certificate serial: 019B405B829A72289A9E8C542DF1B3196010 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft Manifest number: 075F Signing time: Sun 21 Dec 2025 10:01:37 +0000 Manifest this update: Sun 21 Dec 2025 10:01:37 +0000 Manifest next update: Mon 22 Dec 2025 10:01:37 +0000 Files and hashes: 1: cub9InHd4QiG2X_xRwPlgaIEtl4.crl (hash: 3garN5sxlWErdNEOCNIZUtHp6Iv95+yiDesCtjBisSA=) 2: t0ukQ5CSEan3v8t7w6xA6LKAlPA.roa (hash: 0NRhgZITCHjsjwAYQth1zntdOiq0gcrilmGiiV4E8WI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.crl rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:82:9a:72:28:9a:9e:8c:54:2d:f1:b3:19:60:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e6fd2271dde10886d97ff14703e581a204b65e Validity Not Before: Dec 21 10:01:37 2025 GMT Not After : Dec 22 10:01:37 2025 GMT Subject: CN=a016d058d2c92242eb799d51fb1c8612660d0c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:50:3d:fd:65:dd:a3:8d:24:65:5c:dd:d5:5c: 01:58:4c:8d:f0:9c:c0:b4:06:e7:0c:42:c9:33:e5: 59:e8:ad:dc:e4:1e:7d:3f:6a:08:b8:bf:b8:87:a6: 2a:32:85:a4:45:0c:10:14:af:29:46:9a:d6:17:d3: 3a:e2:c6:d5:e0:e3:fa:d3:81:bc:4d:d3:63:f2:a5: 5f:db:e1:d7:5d:4e:e5:6f:8e:f1:1e:ad:00:a0:8c: 36:ab:e7:1f:50:4f:6a:39:cb:ec:01:84:06:72:ee: e0:93:c6:9c:05:0a:68:f6:86:b4:e5:af:61:89:b2: ff:fa:8c:54:81:34:3e:6b:b2:05:18:97:30:64:84: 65:16:71:49:fa:d2:ec:0d:04:bc:9a:28:dd:62:3e: ce:a9:a0:19:ee:e3:23:c9:f7:1b:7c:af:cf:b9:55: 31:97:3d:85:da:f1:a6:f4:b7:de:06:8c:36:ef:b0: fa:24:b5:02:30:93:57:b6:39:7f:95:0b:ae:7a:c4: 63:2d:16:c8:7e:5c:73:a4:a2:7b:20:79:e7:f0:d4: 55:a7:40:1a:e0:a2:14:b3:a2:38:8d:66:fa:69:73: f8:cd:08:74:4b:d6:3a:5b:fa:12:2d:9e:b4:53:2a: f0:96:49:25:81:80:9f:a5:8e:e3:0f:68:aa:65:ce: 3f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:16:D0:58:D2:C9:22:42:EB:79:9D:51:FB:1C:86:12:66:0D:0C:14 X509v3 Authority Key Identifier: keyid:72:E6:FD:22:71:DD:E1:08:86:D9:7F:F1:47:03:E5:81:A2:04:B6:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:a5:1c:9f:7a:fc:9c:91:dd:e9:1e:20:be:e7:99:4f:8d:04: 1b:c7:4d:2f:7f:05:45:95:e2:f2:6b:3c:4c:8e:41:8b:ba:aa: db:79:51:29:00:9d:a3:08:33:be:d2:05:51:49:b9:2f:10:1b: 1a:73:7c:4d:15:8a:ea:e3:07:ca:16:9e:0d:d9:1e:18:f2:57: 77:59:a6:dc:ce:a0:44:cf:d7:51:09:07:64:6c:2a:33:8c:fb: ca:a7:e1:37:2b:c7:1c:3b:93:72:4e:46:3c:64:14:8d:f6:bf: 5a:45:35:55:73:41:85:32:5c:0b:5e:6b:bb:ab:8c:a1:22:9f: 5f:46:ff:a3:aa:20:4a:20:2d:f3:cb:2b:8b:b0:c4:98:09:6c: d3:c8:e7:9d:8a:3b:d0:1b:ec:d4:e1:22:2c:89:0c:3f:35:8c: bb:96:46:f9:6b:b4:16:33:40:a8:1c:ab:38:53:f7:f5:79:bd: 5f:18:eb:86:1b:8d:38:90:e4:0e:87:60:25:cd:6b:9d:fd:49: ab:ff:ce:2e:8e:82:ee:d0:b8:45:35:9a:a1:70:ba:12:00:46: 10:7e:eb:88:1a:48:20:f0:c0:d5:1c:f4:cd:09:20:b6:8b:cf: bf:20:1c:07:65:28:54:0e:59:11:4a:62:96:5b:db:87:68:c9: 98:a1:6a:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW4KaciianoxULfGzGWAQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTZmZDIyNzFkZGUxMDg4NmQ5N2ZmMTQ3MDNlNTgxYTIw NGI2NWUwHhcNMjUxMjIxMTAwMTM3WhcNMjUxMjIyMTAwMTM3WjAzMTEwLwYDVQQD EyhhMDE2ZDA1OGQyYzkyMjQyZWI3OTlkNTFmYjFjODYxMjY2MGQwYzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlA9/WXdo40kZVzd1VwBWEyN8JzA tAbnDELJM+VZ6K3c5B59P2oIuL+4h6YqMoWkRQwQFK8pRprWF9M64sbV4OP604G8 TdNj8qVf2+HXXU7lb47xHq0AoIw2q+cfUE9qOcvsAYQGcu7gk8acBQpo9oa05a9h ibL/+oxUgTQ+a7IFGJcwZIRlFnFJ+tLsDQS8mijdYj7OqaAZ7uMjyfcbfK/PuVUx lz2F2vGm9LfeBow277D6JLUCMJNXtjl/lQuuesRjLRbIflxzpKJ7IHnn8NRVp0Aa 4KIUs6I4jWb6aXP4zQh0S9Y6W/oSLZ60UyrwlkklgYCfpY7jD2iqZc4/mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAW0FjSySJC63mdUfschhJmDQwUMB8GA1UdIwQY MBaAFHLm/SJx3eEIhtl/8UcD5YGiBLZeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3ViOUluSGQ0UWlHMlhfeFJ3UGxnYUlFdGw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83MDY1OGItMzc3YS00OTE1LWIxZTgt NmFmMjE1YmZmMWNlLzEvY3ViOUluSGQ0UWlHMlhfeFJ3UGxnYUlFdGw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83MDY1OGItMzc3YS00OTE1LWIxZTgtNmFmMjE1YmZmMWNl LzEvY3ViOUluSGQ0UWlHMlhfeFJ3UGxnYUlFdGw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKUcn3r8 nJHd6R4gvueZT40EG8dNL38FRZXi8ms8TI5Bi7qq23lRKQCdowgzvtIFUUm5LxAb GnN8TRWK6uMHyhaeDdkeGPJXd1mm3M6gRM/XUQkHZGwqM4z7yqfhNyvHHDuTck5G PGQUjfa/WkU1VXNBhTJcC15ru6uMoSKfX0b/o6ogSiAt88sri7DEmAls08jnnYo7 0Bvs1OEiLIkMPzWMu5ZG+Wu0FjNAqByrOFP39Xm9XxjrhhuNOJDkDodgJc1rnf1J q//OLo6C7tC4RTWaoXC6EgBGEH7riBpIIPDA1Rz0zQkgtovPvyAcB2UoVA5ZEUpi llvbh2jJmKFq6g== -----END CERTIFICATE-----Generated at Sun Dec 21 13:32:29 2025 by rpki-client